This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File:                     X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier:          4zMIoOGroHzArsjfZdAs3PsT47aYxdC14tCkuxP/G/k=
Subject key identifier:   6C:EF:89:32:1A:0A:73:89:55:BC:C1:75:63:C5:75:C3:DC:3D:2B:09
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer:       /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial:       019C424679310E0AEFE2202F241D1EE0DFF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number:          1814
Signing time:             Mon 09 Feb 2026 12:00:40 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:40 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:40 +0000
Files and hashes:         1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
                          2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: Z11BQBbyVo2/2baPqR2YCIfHCvw0Q9z+nGoiCwww7/E=)
                          3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
                          4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
                          5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
                          6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:79:31:0e:0a:ef:e2:20:2f:24:1d:1e:e0:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
        Validity
            Not Before: Feb  9 12:00:40 2026 GMT
            Not After : Feb 10 12:00:40 2026 GMT
        Subject: CN=6cef89321a0a738955bcc17563c575c3dc3d2b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:27:90:fe:6e:2c:c0:f8:c2:47:40:f3:53:
                    3c:1e:fd:5c:71:cc:50:eb:67:a9:5b:6d:23:2d:cb:
                    32:6b:d0:33:b7:5d:51:b8:b7:f8:50:db:04:af:7d:
                    b4:ab:f8:86:a4:6b:ee:49:17:f3:f1:27:75:ee:c4:
                    58:cb:66:2c:04:7e:54:2b:79:07:9e:50:e7:5a:0a:
                    df:92:3d:25:67:fb:62:10:ef:9e:1a:5a:f4:77:ad:
                    cd:4d:46:c9:9e:53:8b:b3:94:d5:97:1d:0a:24:d5:
                    20:2b:09:34:3f:76:30:6a:e1:f4:df:53:ba:79:82:
                    65:22:86:d4:62:d6:2e:28:c5:79:57:96:37:ea:12:
                    34:18:63:ad:41:d2:d4:b1:00:b0:f9:e6:31:0a:61:
                    b7:a1:5c:11:45:da:5c:5e:3a:7c:e0:ca:f8:4f:b9:
                    69:09:27:cb:af:bf:61:0d:5e:b7:6e:e9:25:2a:bd:
                    fb:69:1f:1f:e6:e1:af:8b:88:0c:7d:17:d7:95:2d:
                    9f:a1:ad:10:a3:84:2b:0d:ea:a3:d3:fc:20:4d:a5:
                    7f:be:3e:85:25:3e:1f:c5:ca:4e:7e:0a:10:3d:de:
                    a4:68:58:5d:e8:59:22:38:62:94:a8:51:d4:0a:a9:
                    63:1b:b4:07:64:19:41:f9:07:ef:92:f2:a9:3d:5d:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EF:89:32:1A:0A:73:89:55:BC:C1:75:63:C5:75:C3:DC:3D:2B:09
            X509v3 Authority Key Identifier:
                keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:56:94:d2:30:af:69:e9:f3:d4:b0:0f:23:8f:96:70:9b:ed:
         9b:89:11:88:88:50:1c:f2:4d:a8:fe:da:05:4a:80:c3:ac:3c:
         bd:e5:6a:6f:51:ff:37:2b:ab:b0:66:6d:a5:e4:ef:54:1c:4c:
         0e:74:b1:93:80:da:b0:20:d6:7d:cd:c5:93:f9:8d:61:be:8d:
         4b:61:6b:7c:c7:38:01:2a:5f:dc:07:21:ed:c8:2f:a9:e8:9e:
         f4:a9:d5:50:ac:98:51:02:f1:58:f8:75:6a:95:be:61:0a:07:
         6b:4e:65:03:d8:2b:66:18:ed:14:af:5f:b0:1b:36:04:24:c0:
         c9:5f:91:a5:1e:62:0c:5f:2d:9b:bf:27:20:70:b1:68:c9:37:
         21:22:60:23:94:6a:9c:9f:79:c6:b7:14:b1:8e:d5:bc:71:1f:
         5f:af:ac:74:c3:c4:52:b0:46:7c:7a:da:1a:36:35:ef:1c:56:
         08:78:e5:7c:05:68:6d:9f:73:ea:f8:81:34:da:b4:15:4b:1d:
         62:21:b5:05:4f:fc:e0:bf:9a:70:a7:78:4a:7e:a0:d6:17:d4:
         9a:ca:ed:2b:ed:fc:a5:c2:9e:97:d0:6c:87:aa:9f:61:c5:bf:
         08:41:0f:7f:f3:56:9d:3b:b5:05:52:ca:e4:b9:6c:fd:99:1b:
         6a:61:bb:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRnkxDgrv4iAvJB0e4N/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz
NTAzMzYwHhcNMjYwMjA5MTIwMDQwWhcNMjYwMjEwMTIwMDQwWjAzMTEwLwYDVQQD
Eyg2Y2VmODkzMjFhMGE3Mzg5NTViY2MxNzU2M2M1NzVjM2RjM2QyYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHMnkP5uLMD4wkdA81M8Hv1cccxQ
62epW20jLcsya9Azt11RuLf4UNsEr320q/iGpGvuSRfz8Sd17sRYy2YsBH5UK3kH
nlDnWgrfkj0lZ/tiEO+eGlr0d63NTUbJnlOLs5TVlx0KJNUgKwk0P3YwauH031O6
eYJlIobUYtYuKMV5V5Y36hI0GGOtQdLUsQCw+eYxCmG3oVwRRdpcXjp84Mr4T7lp
CSfLr79hDV63buklKr37aR8f5uGvi4gMfRfXlS2foa0Qo4QrDeqj0/wgTaV/vj6F
JT4fxcpOfgoQPd6kaFhd6FkiOGKUqFHUCqljG7QHZBlB+QfvkvKpPV2YhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzviTIaCnOJVbzBdWPFdcPcPSsJMB8GA1UdIwQY
MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt
NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj
LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFaU0jCv
aenz1LAPI4+WcJvtm4kRiIhQHPJNqP7aBUqAw6w8veVqb1H/NyursGZtpeTvVBxM
DnSxk4DasCDWfc3Fk/mNYb6NS2FrfMc4ASpf3Ach7cgvqeie9KnVUKyYUQLxWPh1
apW+YQoHa05lA9grZhjtFK9fsBs2BCTAyV+RpR5iDF8tm78nIHCxaMk3ISJgI5Rq
nJ95xrcUsY7VvHEfX6+sdMPEUrBGfHraGjY17xxWCHjlfAVobZ9z6viBNNq0FUsd
YiG1BU/84L+acKd4Sn6g1hfUmsrtK+38pcKel9Bsh6qfYcW/CEEPf/NWnTu1BVLK
5Lls/ZkbamG7eg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:06 2026 by rpki-client